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Top Stories 

• Three suspects were arrested and charged April 23 for allegedly planting skimming devices 
at various locations in Oregon in order to steal credit and debit card information that they 
used to purchase thousands of dollars of merchandise. - Salem Statesman Journal (See 
item 3) 

• U.S. and Canadian officials announced May 1 new safety rules for trains carrying crude oil 
and other flammable materials, including new standards for tank-car construction and new 
brake-system requirements. - Washington Post (See item 11 ) 

• Two gunmen opened fire outside a cartoon exhibit and contest hosted at the Curtis Culwell 
Center in Garland, Texas, May 3, injuring one security guard before police shot and killed 
both gunman. - Reuters (See item 24) 

• The owners of the Manco and Manco pizza chain were charged for allegedly skimming 
$981,459 from the chain’s 3 Ocean City Boardwalk locations in New Jersey over 5 years. - 
Associated Press; Press of Atlantic City (See item 25) 
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Energy Sector 



1. May 1, Associated Press - (Wyoming) Explosion, fire at Chesapeake oil facility near 
Douglas injures 2 contract workers. A May 1 explosion and fire at the Chesapeake 
Energy Corp., facility in Converse County prompted the evacuation of the facility after 
two Susquehanna Services contract workers were injured while were working with 
fluid at a well head. The cause of the fire is under investigation. 

Source: 

http://www.therepublic.com/view/storv/9650ded0d81a47c684fa79c6fl571c43/WY~ 

Qil-Facility-Fire 



For another story, see item 11 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. May 1, Associated Press - (Connecticut) Nuclear Regulatory Commission identifies 
3 violations at Millstone plant. The U.S. Nuclear Regulatory Commission (NRC) 
reported May 1 that it identified 3 violations from 2011 at Millstone Nuclear Power 
Plant’s Unit 2 reactor in Waterford, 2 of which are being considered for escalated 
enforcement. NRC officials stated that one finding constituted a willful violation 
regarding an incomplete safety report that left out information. 

Source: http://foxct.com/2015/05/01/nuclear-regulatory-commission-identifies-3- 
violations-at-millstone-plant/ 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. May 2, Salem Statesman Journal - (Oregon) 3 suspects charged with credit, debit 
card fraud. Salem, Oregon police reported that three suspects from California were 
arrested April 23 on charges of identity theft related to a regional skimming scheme in 
which the suspects allegedly planted skimming devices at various locations to steal 
credit and debit card information that they used to purchase thousands of dollars of 
merchandise in multiple cities in Oregon. Authorities recovered over 100 fraudulent 
credit and debit cards, electronics, clothing, gift cards, and $3,500 in currency in 
searches of the suspects’ vehicle and hotel room. 

Source: http://www.statesmaniournal.com/storv/news/2015/05/03/three-suspects- 
charged-credit-debit-card-fraud/26801 8 17/ 

4. May 1, WJXT 4 Jacksonville - (International) 3 convicted in $9.2-million wire fraud 
scheme. Three businessmen were convicted of wire fraud May 1 for a scheme in which 
they used two New Zealand-based companies, Unistate Investments Savings and Loan 
Limited, as well as Aster Capital, Inc., and Vital Funds, Inc., to offer clients alternative 
capital financing and collected account arrangement fees on deals that were never 
closed, costing clients about $9.2 million in losses. One additional suspect remains a 
fugitive while two others pleaded guilty to their roles in the scheme. 

Source: http://www.news4iax.com/news/3-convicted-in-92million- wire- fraud- 
scheme/32687552 

5. May 1, San Francisco Bay City News - (California) “Cotton Ball Bandit” convicted 
for 10 bank robberies. A Lakspur, California man dubbed the “Cotton Ball Bandit” 
was convicted April 29 for robbing 10 banks and attempting to rob another throughout 
Marin County between December 2012 and December 2013. Police arrested the 
suspect after he robbed the Novato Bank of the West in 2013 and led officers on a 
chase before crashing near Northgate Mall on U.S. Highway 101 in San Rafael. 

Source: http://kron4.com/2015/05/01/cotton-ball-bandit-convicted-for- 10-bank- 
robberies/ 

6. May 1, Bergen County Record - (New Jersey) Kearny bank branch in North 
Arlington says skimmer was hooked up to ATM. Authorities are investigating after 
reporting May 1 that 128 Kearny Bank customers in North Arlington, New Jersey, may 
have had their credit or debit card data stolen after a skimmer device was found on an 
ATM machine at the bank. 

Source: http://www.northiersev.com/news/keamv-bank-branch-in-north-arlington-says- 
skimmer-was-hooked-up-to-atm- 1 . 1 323372 
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Transportation Systems Sector 

7. May 3, WMC 5 Memphis - (Tennessee) 1 person killed, several injured in Highway 
385 crash. Westbound lanes of Highway 385 in Memphis were closed for about 3 
hours May 2 while crews cleared the scene of a three vehicle crash that killed one 
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person and left five others injured. The cause of the accident remains under 
investigation. 

Source: http://www.mvfoxal.com/storv728961337/bad-crash-shuts-down-all-lanes-of- 
traffic-on-westbound-385 



8. May 3, Associated Press - (International) Airliner makes emergency landing at 
Vancouver Airport. An Alaska Airlines flight headed to Seattle from Juneau, Alaska, 
made an emergency landing at Vancouver International Airport in Canada May 3, due 
to problems with one of the plane’s two electrical systems. The plane landed safely 
while passengers were moved to a replacement aircraft that continued on to Seattle. 
Source: http ://abcnew s . go .com/Intemational/wireStory/airliner-makes-emergenc y- 
landing-vancouver-airport-30778521 

9. May 2, WLEX 18 Lexington - (Kentucky) KSP: 2 adults and 4 children killed in 
Wayne Co. crash. Authorities are investigating after portion of Kentucky Highway 90 
in Wayne County was closed for several hours May 1 when a vehicle traveling 
westbound crossed into oncoming traffic and struck another vehicle, killing 6 people 
and leaving 2 others injured. 

Source: http://www.lexl8.com/story/28957020/officials-sav-an-accident-on-ky-90- 
leaves-at-least-5-dead 

10. May 1, KHON 2 Honolulu - (Hawaii) Hawaiian Airlines emergency triggered flight 
delays, diversions in Kahului. A Hawaiian Airlines flight departing from Kahului 
Airport in Maui returned to the airport shortly after takeoff May 1 when the flight crew 
declared an emergency due to an unidentified odor in the plane, resulting in delays to 
several flights en route to and from Maui. Two individuals were transported to an area 
hospital with minor injuries, and the flight’s 224 passengers and 10 crew members 
were safely evacuated from the plane using emergency slides. 

Source: http://khon2.com/2015/05/01/hawaiian-ahiines-emergencv-triggered-flight- 
delays-diversions-in-kahului/ 



11. May 1, Washington Post - (International) Transportation Dept, gets strict on rules 
for trains carrying flammable oil. The U.S. Department of Transportation (DOT) 
secretary along with Canada’s minister of transport announced May 1 new safety rules 
for trains carrying crude oil and other flammable materials, including new standards for 
tank-car construction, new brake-system requirements, and new speed limits for some 
trains travelling through “high- threat” urban areas. A DOT spokesperson stated that all 
tank cars will be manufactured to new design standards or upgraded to meet them by 
April 2020. 

Source: http://www.washingtonpost.com/local/trafficandcommuting/usdot-gets-strict- 
on-rules-for-trains-carrving-flammable-oil/2015/05/01/fd63blf8-f00e-l Ie4-a55f- 
38924fca94f9 story.html 
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Food and Agriculture Sector 



12. May 2, U.S. Food and Drug Administration - (International) Sun Rich Fresh Foods 
Inc. recalls apple slices because of possible health risk. The U.S. Food and Drug 
Administration reported May 1 that Sun Rich Fresh Foods Inc., voluntarily issued a 
recall for apple slices and products containing sliced apples from the company’s 
Northeast Fresh Facility in Ontario, Canada, due to possible contamination with 
Listeria monocytogenes. The products were distributed to several States in the U.S. 
through retail stores, distributors, and food service establishments. 

Source: http://www.fda.gov/Safety/Recalls/ucm445391.htm 

13. May 1, U.S. Environmental Protection Agency - (North Carolina) Dairy company 
owner sentenced to six months of home detention and ordered to pay $15,000 fine 
for discharging 11,000 gallons of cow feces into the French Broad River. Tap Root 
Dairy, LLC and its owner were issued a collective $95,000 in fines and the dairy 
company was placed on a 4-year probationary term after employees failed to check and 
maintain the levels of cow waste in the on-site waste containment lagoons at the 
company’s Fletcher, North Carolina facility, resulting in the spillover and discharge of 
1 1,000 gallons of cow feces and other waste into the French Broad River in December 
2012 . 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/21b8983ffa5d0e4685257dd4006b85e2/8faa3 

5ddc66eaa9a85257e380055b9fb 



14. May 1, U.S. Department of Agriculture - (Georgia; Tennessee) Bi-Lo Supermarket 
recalls ground beef products due to possible foreign matter contamination. The 

Food Safety and Inspection Service announced May 1 that Bi-Lo Supermarket issued a 
recall for about 11-22 pounds of its Bi-Lo Market Style Ground Beef products due to 
possible contamination with fragments from a small plastic pop-up timer. The recalled 
product was sold from one retail location to consumers in Georgia and Tennessee. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-074-201 5-release 
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Water and Wastewater Systems Sector 

15. May 1, WCHS 8 Charleston - (West Virginia) Boil water advisory issued for 200 
customers in Fayette County. West Virginia American Water issued a precautionary 
boil water advisory for about 200 customers in the Mossy area of Fayette County May 
1 due to a water main break on Route 612/Okey Patterson Road. The boil order will 
remain in effect until further notice pending water quality testing. 

Source: http://www.wchstv.com/news/features/eyewitness-news/stories/Boil-Water- 
Advisorv-Issued-For-200-Customers-In-Fayette-Countv-125450.shtml 



16. May 1, WALA 10 Mobile - (Alabama) Public swimming advisory for Mobile Bay at 
Fairhope Public Beach. The Alabama Department of Public Health issued a 



swimming advisory May 1 for Fairhope Public Beach due to recent tests showing high 
counts of bacteria in the water that may increase the risk of illness. Officials continue to 
monitor the water and the advisory will be lifted once bacteria values fall below the 
U.S. Environmental Protection Agency’s standard. 

Source: http://www.mvfoxal.com/storv/28955666/public-swimming-advisorv-for- 
mobile-bay-at-fairhope-public-beach 

For another story, see item 29 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

17. May 4, WDAF 4 Kansas City - (Missouri) No signs of vandalism in bus barn fire 
that destroyed 8 Chillicothe school buses. Authorities are investigating and believe 
electrical issues inside a Missouri building housing Chillicothe school buses caused 
eight buses to catch fire and explode May 3. 

Source: http://fox4kc.com/2015/05/03/bus-barn-fire-destrovs-chillicothe-school-buses/ 

18. May 4, WLWT 5 Cincinnati - (Ohio) Power outage closes Mason High School. A 
power outage prompted the closure of Mason High School in Ohio May 4. Officials did 
not disclosure the cause of the outage. 

Source: http://www.wlwt.com/news/power-outage-closes-mason-high- 
school/32790272 

19. May 1, WFSB 3 Hartford - (Connecticut) 4 students injured in school bus crash in 
Old Lyme. Four students from Old Fyme Center School in Connecticut were injured 
following an accident involving a school bus and a vehicle on Route 156 near Shore 
Road May 1, which closed the roadway for approximately 2 hours. 

Source: http://www.wfsb.com/storv/28955004/route-156-in-old-lyme-closed-after- 
school-bus-crash 
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Emergency Services Sector 

20. May 4, WAPT 16 Jackson - (Mississippi) Three inmates escape downtown jail. The 
Hinds County Sheriffs Office is searching for a third inmate May 4 that escaped from 
the Hinds County Jail in Jackson, Mississippi, May 3 by allegedly setting a sheet on 
fire and using it to burn a piece of the window. Two other inmates that also escaped 
were recaptured near the jail. 
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Source: http://www.wapt.com/news/three-inmates-escape-downtown-iail/32787642 



21. May 4, Chicago Tribune - (Illinois) Busted at 14 for pretending to be a cop, man 
charged again with impersonating officer. Two men were charged May 1 for 
impersonating police officers after police stopped their vehicle while investigating a 
call of shots fired in the Englewood neighborhood of Chicago, and found that the 
suspects were wearing bulletproof vests and had a BB gun, scanner, police duty belt, 
and a stun gun in their possession. Authorities also reported that one of the suspects had 
several prior charges of impersonating an officer. 

Source: http://www.chicagotribune.com/news/local/breaking/ct-known-cop- 
impersonator-accused-of-posing-as-police-officer-again-20150504-story.html 
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Information Technology Sector 

22. May 4, Securityweek - (International) PayPal fixes remote code execution flaw in 
Partner Program website. PayPal fixed a vulnerability discovered by Vulnerability 
Lab researchers in its Partner Program Web site which would allow an attacker to 
leverage a bug in the site’s Java Debug Wire Protocol (JDWP) service to remotely 
execute server-side commands with root privileges. 

Source: http://www.securitvweek.com/paypal-fixes-remote-code-execution-flaw- 
partner-program- website 

23. May 1, Threatpost — (International) Mozilla moving toward full HTTPS 
enforcement in Firefox. The Mozilla Foundation reported that it will be phasing out 
unsecured hypertext transfer protocol (HTTP) connections in the Firefox browser in a 
two-phase plan, in which the company will only offer new browser features to secure, 
HTTPS (HTTP Secure) -enabled Web sites, before ultimately making existing features 
incompatible with HTTP sites altogether. 

Source: https://threatpost.com/mozilla-moving-toward-full-https-enforcement-in- 
firefox/1 12537 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 



[ Return to too l 



- 7 - 



Commercial Facilities Sector 



24. May 4, Reuters - (Texas; Arizona) Gunman in cartoon attack in Texas monitored 
for years. Two gunmen opened fire outside a cartoon exhibit and contest hosted at the 
Curtis Culwell Center in Garland, Texas, May 3, injuring one security guard before 
police shot and killed both gunman. FBI agents in Phoenix evacuated the Autumn 
Ridge apartment complex for several hours May 3-May 4 while they searched an 
apartment and white van parked outside in connection to the incident. 

Source: http://www.reuters.com/article/2015/05/Q4/us-usa-shooting-texas- 
idUSKBN0NP01G201 50504 

25. May 4, Associated Press; Press of Atlantic City - (New Jersey) Owners skimmed 
nearly $1M from famed boardwalk pizzerias, feds allege. Court documents filed by 
federal prosecutors allege that the owners of the Manco and Manco pizza chain 
skimmed $981,459 from the chain’s 3 Ocean City Boardwalk locations in New Jersey 
over 5 years and evaded paying $336,273 in taxes in order to use the funds for personal 
living expenses. 

Source: http://www.nj.com/cape-mav- 

county/index.ssf/2015/05/owners skimmed nearly lm from famed boardwalk pizz. 
html 



26. May 3, Contra Costa Times - (California) Livermore: Suspected DUI driver plows 
into apartment complex, killing woman and child. Two individuals were killed and 
two others injured when they were struck by a suspected drunken driver who lost 
control of his vehicle and crashed into a Livermore, California, apartment complex 
May 2. 

Source: http://www.contracostatimes.com/breaking-news/ci 28039 189/livermore- 
suspected-dui-driver-plows-into-apartment-complex 

27. May 3, San Francisco Bay City News - (California) Officials identify suspect 
involved in fatal Bay Point accident. One person was killed and eight others were 
injured May 2 when a suspected drunk driver allegedly backed his vehicle into a group 
of patrons in the parking lot of La Finca Restaurant in Bay Point, California. 

Source: http://abc7news.com/news/officials-identifv-suspect-involved-in-fatal-bay- 
point-accident/694292/ 

28. May 3, KHOU 11 Houston - (Texas) Mass shooting at Houston nightclub, six 
injured. Six individuals were injured in a mass shooting outside the Empire nightclub 
in Houston May 3 following a confrontation that started inside the business. The 
incident remains under investigation. 

Source: http://www.khou.com/storv/news/local/2015/05/03/mass-shooting-at-houston- 
nightclub-six-injured/26826747/ 
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Dams Sector 



29. May 4, KBND 1110 AM/100.1 FM Bend - (Oregon) Peterson Creek Reservoir 

drained. The Governor of Oregon declared a drought emergency in Crook County May 
4 after the Peterson Creek Reservoir near Big Summit Prairie was drained of nearly 75 
percent of its water when a trespasser allegedly manipulated and damaged a valve. 
Source: http://www.kbnd.com/kbnd-news/local-news-feed/141724 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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